Cloudflare MCP connector for Manus

Manage DNS, Workers and R2 on Cloudflare with an AI agent

Connect your own Cloudflare account and Manus can check and update DNS records, read Workers and Pages deploys and logs, list your R2, KV and D1 storage, explain firewall and Zero Trust rules and turn traffic data into reports. For changes, ask for the list first and confirm it in the chat.

First, connect Cloudflare in Manus
example.comDNS recordsProxiedDNS only

Point docs.example.com to our Pages site and switch our email to the new provider. Show me the changes first.

  • Aexample.com192.0.2.10
  • CNAMEwwwexample.com
  • CNAMEdocsAddeddocs-site.pages.dev
  • MXexample.comChanged10 mx1.mail.example.net10 mx.old-mail.example.org
  • TXTexample.comChangedv=spf1 include:_spf.mail.example.net ~allv=spf1 include:_spf.old-mail.example.org ~all
  • TXT_dmarcv=DMARC1; p=none

Manus · 3 changes: add docs.example.com to the docs-site Pages project (Cloudflare adds its CNAME for you), point MX to the new provider and update the SPF record. Reply OK and I’ll apply them.

Manage Cloudflare DNS records from one chat

Check and change your Cloudflare DNS settings in plain words, without clicking through the dashboard record by record.

Add DNS records for a new domain or email provider

Tell Manus what the records are for. As your Cloudflare DNS AI helper, it lists the current records, writes the CNAME, MX or TXT records you need and checks them against what’s already there. Ask for the change list first and confirm it before anything is applied.

  • Custom domain for a Pages site

    Add the domain to your Pages project first and Cloudflare creates this CNAME for you. A CNAME added by hand on its own returns a 522 error.

    • CNAMEshopshop-site.pages.dev
  • Email with a new provider

    MX and TXT records are always DNS only, so there’s no proxy setting to get wrong.

    • MXexample.com10 mx1.mail.example.net
    • MXexample.com20 mx2.mail.example.net
    • TXTexample.comv=spf1 include:_spf.mail.example.net ~all
  • Verify the domain for another service

    The CNAME stays DNS only: if it were proxied, the service would see Cloudflare’s address instead of the target it checks for.

    • TXTexample.comverify=3f9a1c7e
    • CNAMEs1._domainkeys1.dkim.mail.example.net

Find why a site won’t load or email doesn’t arrive

Manus compares your DNS records and proxy settings with what the site or mail service expects, then explains the likely cause and the fix in plain words.

Why mail to example.com isn’t arriving
  • MX recordsBoth still point to mx.old-mail.example.org, the provider you moved away from.
  • SPFThere are two SPF records. Receiving servers treat that as an error, so merge them into one.
  • DMARC_dmarc is set to p=none, which only monitors mail, so it isn’t what’s blocking it.
Suggested fix

Replace both MX records with mx1.mail.example.net and mx2.mail.example.net, then keep one SPF record that includes the new provider.

Nothing has been changed yet.

Read Cloudflare Workers logs and Pages deploys

Find out what changed in the latest deploy and why requests started failing, without digging through the dashboard.

Ask why a Worker started failing after a deploy

Manus lists the recent deployments, reads the logs and points to the error and the change behind it. If the fix is in your code, connect GitHub too and it can open a pull request.

shop-apiWorker
  • 7c41e9aExport orders to R22h ago312 errors
  • 3b8d2f4Add order searchYesterday0 errors
  • e19a6c0Update dependencies3 days ago0 errors
docs-sitePages
  • maina91c2e0Today
  • preview/pricing5d10b7eYesterday
shop-api logs
  1. 14:05:12GET /orders 200
  2. 14:05:37POST /orders/export 500
  3. 14:05:37TypeError: Cannot read properties of undefined (reading 'put')
  4. at exportOrders (src/export.ts:18:24)
  5. 14:06:02GET /orders 200
Cause and fix

Version 7c41e9a removed the EXPORTS R2 binding, so env.EXPORTS is undefined when /orders/export saves the file. Add the binding back in wrangler.jsonc and deploy again.

Open the fix as a pull request with GitHub

List Cloudflare R2 buckets, KV namespaces and D1 databases

See everything your account stores in one place, and which items nothing uses anymore.

Get one table of your storage and what uses it

Through the Cloudflare API MCP server, Manus lists your R2 buckets, KV namespaces and D1 databases with their size, and checks which Workers are bound to each one.

  • product-imagesR2 bucket18.4 GBshop-web
  • exportsR2 bucket2.1 GBshop-api
  • uploads-2023R2 bucket46.7 GBNot bound to any Worker
  • SESSIONSKV namespace12,840 keysshop-api
  • FEATURE_FLAGSKV namespace32 keysshop-web, shop-api
  • orders-dbD1 database310 MBshop-api
  • orders-db-stagingD1 database8 MBNot bound to any Worker

2 items aren’t bound to any Worker: uploads-2023 (46.7 GB) and orders-db-staging. Check before deleting them, since other tools can still reach them through the Cloudflare API.

Review Cloudflare firewall rules and traffic

Get your security rules explained in plain words, and a weekly look at requests, cache and what was blocked.

Explain Cloudflare Zero Trust policies and WAF rules

Manus reads your WAF custom rules, rate limiting rules and Access policies, explains each one in a sentence and points out the ones that look broader than needed. Ask for suggestions only, and decide yourself what to change.

Security rules for example.com
  • Block admin outside officeBlockWAF custom ruleBlocks /admin for every visitor whose IP isn’t on your office list.
  • Allow partnersSkipWAF custom ruleLets 198.51.0.0/16 skip your other custom rules. That’s 65,536 addresses, so if your partner uses only a few, list just those.
  • Login rate limitBlockRate limiting ruleBlocks an IP for 10 minutes after more than 20 requests to /login in one minute.
  • Staging appAllowAccess policyIncludes Everyone, so anyone who can sign in reaches staging.example.com. Limit it to emails ending in @example.com.

Send a weekly Cloudflare analytics report

Manus pulls requests, cache use and blocked traffic for the last 7 days and writes a short report with a chart. To get it every week, set it up as a scheduled task.

Weekly report for example.comLast 7 days
Requests1.42M+12%
Served from cache61%
Blocked requests23.8K
MonTueWedThuFriSatSun
RequestsBlocked requests

Requests were up 12% on the week before. Blocked requests peaked on Thursday at 9.1K, mostly from the Login rate limit rule. The cache served 61% of requests.

See how scheduled tasks work

Connect the Cloudflare MCP server in Manus

There’s no Cloudflare MCP server setup to do and no API token to paste. Cloudflare is already in Manus Connectors, and you approve access on Cloudflare’s own screen.

  1. Open Connectors

    In Manus, open Connectors and select Cloudflare.

  2. Sign in to Cloudflare

    Choose the accounts Manus can use. To limit what it can change, select Edit Permissions, then Read only.

  3. Ask in a task

    Name a domain, Worker or bucket and say what you need in plain words.

Main things Manus works with
  • Domains and DNS recordsRecords, proxy status and zone settings
  • Workers and PagesDeployments, logs and build logs
  • StorageR2 buckets, KV namespaces and D1 databases
  • SecurityFirewall rules and Zero Trust policies
  • AnalyticsRequests, cache and blocked traffic
  • Cloudflare developer docsOfficial guides for settings and errors

Manus gets only the permissions you grant on Cloudflare’s screen, in the accounts you pick. With edit access it can make changes, so for tasks that edit settings, ask for the change list first.

Explore connectors and guides

Questions about the Cloudflare MCP connector

Does Manus support Cloudflare MCP?

Yes. Manus connects to Cloudflare’s official MCP (Model Context Protocol) server at mcp.cloudflare.com. This Cloudflare API MCP server covers the whole Cloudflare API and its developer docs. It’s already in Manus Connectors, so there’s nothing to install or host.

How do I connect Cloudflare to Manus?

Open Connectors in Manus, select Cloudflare and sign in. On Cloudflare’s screen, choose the accounts Manus can use, review the permissions and select Authorize. This Cloudflare MCP server OAuth sign-in means your Cloudflare password is never shared with Manus.

Can I give Manus read-only access to Cloudflare?

Yes. When you sign in, select Edit Permissions on Cloudflare’s screen, then Read only. That turns off the optional edit permissions, and only the permissions Cloudflare marks as required stay on. If a task later needs a permission you left out, connect again and grant it.

Which Cloudflare products can Manus work with?

DNS records, Workers, KV, R2, D1, Pages, firewall rules, Zero Trust, analytics and more, plus a search of Cloudflare’s developer docs. What it can do in each one depends on the permissions you grant.

Do DNS changes from Manus take effect right away?

Yes. Manus edits the record in your Cloudflare account through Cloudflare’s API, just like an edit in the dashboard, so there’s no separate publish step. Visitors may still see the old value for a few minutes while DNS caches update: Proxied records use a five-minute TTL, and DNS only records use the TTL you set. That’s why it’s worth reading the change list before you say OK.

Can Manus read my Cloudflare Workers logs?

Yes, for Workers that have Workers Logs turned on, which new Workers have by default. It can also read the build logs of Pages deployments. Name the Worker or project and say what went wrong.

Do I need a Cloudflare MCP API token?

No. Cloudflare’s server also accepts an API token, which suits scripts and CI/CD. In Manus, you sign in with your Cloudflare account and approve access on Cloudflare’s screen, so there’s no token to create or paste.

What is Cloudflare MCP Code Mode?

It’s how Cloudflare’s server covers more than 2,500 API endpoints with a few tools. Instead of one tool per endpoint, the agent finds the right endpoint with search, calls it with execute and looks things up with docs. The code it writes runs in an isolated sandbox on Cloudflare. There’s nothing to turn on in Manus.

Do I need Claude, Claude Code or Codex to use Cloudflare MCP?

No. A “Cloudflare MCP Claude Code” guide or a “Cloudflare MCP Codex” setup has you add Cloudflare’s server to that tool yourself. In Manus, Cloudflare is already in Connectors: sign in once, ask in a chat and the task runs in the cloud.

Is Manus a Cloudflare AI agent?

Manus is a general AI agent that works on your own Cloudflare account through Cloudflare’s official MCP server, with the permissions you grant. It isn’t a Cloudflare product. If you’re looking to build a Cloudflare Workers AI agent of your own, Workers AI and the Agents SDK are made for that, and Manus can still check the Workers you deploy.

Is this the same as hosting MCP servers on Cloudflare?

No. Searches for Cloudflare MCP servers or a Cloudflare MCP gateway are often about building, hosting or securing your own MCP servers on Cloudflare. This page is about connecting your Cloudflare account to Manus, so you can work with your DNS, Workers, storage and security settings in a chat.

Can I revoke Manus’s access to Cloudflare?

Yes. Open Connectors in Manus, select Cloudflare and choose Disconnect. You can also revoke it in your Cloudflare profile under Manage OAuth authorizations.

Connect Cloudflare and check your DNS records

Connect Cloudflare in Manus